A cyberattack affecting approximately 700 supermarkets in France has exposed serious weaknesses in the digital systems used to control commercial refrigeration, raising concerns about the vulnerability of European food distribution networks and other essential infrastructure.

The attack began overnight on 11–12th October, when intruders gained access to remotely managed refrigeration equipment and altered operating settings, causing refrigerators and freezers to overheat.

Stores belonging to several major supermarket chains were affected, including Intermarché, Netto, Coopérative U, Carrefour and Monoprix. Some were forced to discard substantial quantities of fresh and frozen food.

French Finance Minister Roland Lescure confirmed that approximately 700 of the country’s 10,000 supermarkets had been affected, although the severity of the disruption varied between locations.

The Paris prosecutor’s office has opened an investigation into the attack, including the damage caused by destroyed merchandise and reported fires.

The incident has drawn attention to industrial control systems that are routinely connected to the internet but may receive less cybersecurity protection than corporate networks and customer databases.

Refrigeration systems remotely manipulated

Investigators have established that refrigeration equipment was targeted through vulnerabilities associated with remote monitoring and control systems.

The French cybersecurity authorities identified compromises involving products supplied by Danish manufacturer Danfoss and American company Copeland.

Some of the affected systems used older equipment that no longer received regular security updates.

According to information released by the companies and cybersecurity specialists, certain industrial controllers had been accessible through public internet connections, creating opportunities for unauthorised access.

Hackers reportedly manipulated defrost cycles and increased temperature settings, preventing equipment from maintaining the cold conditions required to preserve food.

The attack affected approximately 300 Intermarché and Netto stores, while Coopérative U reported disruption at around 80 outlets.

Several retailers managed to contain the damage, but others lost substantial quantities of stock.

The consequences extended beyond malfunctioning equipment. Businesses faced the cost of replacing spoiled food, repairing refrigeration systems and restoring normal operations.

The precise financial damage is still being assessed, although estimates from the retail sector indicate that losses across France could amount to tens of millions of euros.

Vulnerabilities in connected equipment

The incident illustrates the security problems created by the growing use of internet-connected industrial equipment.

Modern refrigeration installations allow contractors and maintenance specialists to monitor temperatures, adjust settings and diagnose faults remotely.

These arrangements can reduce operating costs and improve efficiency, but they also create additional access points that attackers may exploit.

Cybersecurity specialists have identified vulnerabilities in commercial refrigeration platforms manufactured by Danfoss and Copeland.

The manufacturers subsequently addressed identified flaws, although older or unsupported equipment remained a concern.

A critical problem for businesses is that industrial machinery often remains operational for many years after its original software has become obsolete.

Replacing entire refrigeration installations can involve substantial expense and operational disruption, encouraging operators to retain equipment that may no longer meet contemporary cybersecurity standards.

The risks are particularly difficult to manage when responsibility for maintenance, software updates and network security is divided between retailers, equipment suppliers and external contractors.

France’s delayed cybersecurity legislation

The attack has renewed scrutiny of France’s implementation of the European Union’s NIS2 Directive, which is intended to strengthen cybersecurity across sectors providing important economic and public services.

The directive establishes common requirements covering risk management, incident reporting, organisational responsibility and protection against cyber threats.

Its scope extends beyond traditional critical infrastructure such as energy, telecommunications and transport to include certain businesses involved in food production, processing and distribution.

EU member states were required to incorporate the directive into national legislation by 17 October 2024.

France was among the countries that received a formal warning from the European Commission in May 2025 over incomplete implementation.

French cybersecurity specialists have since warned that delays have complicated efforts to establish consistent obligations for organisations operating industrial and commercial systems.

However, NIS2 does not automatically cover every supermarket. Its application depends on the nature and size of an organisation and the provisions of national implementing legislation.

The incident therefore raises questions not only about the pace of legislative implementation but also about the practical protection of equipment already in use.

Wider implications for European infrastructure

The disruption demonstrates how a cyberattack can cause physical damage without directly targeting a conventional industrial facility.

Unlike breaches intended to steal customer information, the French incident interfered with machinery responsible for preserving essential products.

The distinction is important for European policymakers, who increasingly face threats to infrastructure that combines digital controls with physical operations.

The European Union’s cybersecurity agency ENISA has organised cross-border exercises to test how authorities and companies would respond to disruption affecting essential services.

The attack itself has been established, but responsibility for it has not been publicly attributed.

French authorities have said there is no immediate threat to national food supplies. Nevertheless, the destruction of merchandise and interruption of ordinary retail operations have demonstrated the potential economic consequences of weaknesses in relatively commonplace equipment.

The continuing investigation must establish how access was obtained, which systems were compromised and whether the vulnerabilities were known to operators before the attack.

For Brussels and national regulators, the case provides a practical test of whether European cybersecurity legislation can translate into effective protection for the connected equipment on which ordinary commercial activities increasingly depend.

Drone strikes against merchant vessels off Bulgaria have brought Russia’s war into waters bordering NATO and the European Union. With grain exports threatened, shipping costs rising and Sofia seeking allied protection, Moscow’s campaign against maritime trade risks becoming another instrument of economic and political pressure.

Russia’s expanding campaign against commercial shipping in the Black Sea is creating a security crisis that extends far beyond Ukraine. The latest drone attacks off Bulgaria’s coast have left 11 sailors missing, forced Sofia to seek assistance from NATO and the European Union, and raised concerns that Moscow is attempting to disrupt one of the world’s principal agricultural export routes.

On 13th October, the Guinea-Bissau-flagged HS Dignity sank after being struck by drones approximately 17 nautical miles east of the Bulgarian village of Krapets. Another vessel, the Ukrainian-owned, Maltese-flagged Chelsea 3, was attacked near Byala. All 15 crew members were rescued, although five sustained minor injuries. The incidents followed earlier attacks in Bulgaria’s exclusive economic zone on 6th October, when the ALFA WATAN sank and the grain-carrying ABLE was damaged.

The significance lies not simply in the destruction of merchant vessels but in the geographical expansion of the threat. Commercial routes previously regarded as comparatively safer alternatives to Ukraine’s exposed ports are now becoming operationally dangerous. Bulgaria and Romania, both NATO and EU members, face disruption to trade, maritime insurance and port operations as the conflict spreads across the western Black Sea.

Russia’s Campaign Against Maritime Trade

The latest attacks follow months of Russian strikes against Ukrainian ports, export terminals and civilian shipping. As EU Today previously reported, repeated attacks on Odesa have already reduced Ukraine’s grain-export capacity, while alternative routes through the Danube and neighbouring European countries cannot fully replace its major Black Sea terminals.

The extension of attacks towards Bulgaria changes the economic calculation. Ships carrying agricultural products, those approaching Danube ports and vessels operating between Black Sea countries now face greater uncertainty, regardless of whether they enter Ukrainian territorial waters.

Maritime security company Ambrey assessed the earlier October attacks as highly likely to have been conducted by Russian forces. Its assessment identified vessels associated with Ukrainian grain trade as the principal targets, rather than suggesting that every commercial ship was being attacked indiscriminately.

This distinction is important, but it offers little reassurance to international shipping companies. A campaign directed against Ukrainian trade can disrupt the wider maritime economy when insurers, shipowners and exporters cannot establish which routes remain safe.

The economic consequences are already becoming apparent. Shipowners must consider higher insurance premiums, additional security measures and the possibility of losing vessels and crews. Traders may redirect cargoes or withdraw from routes whose commercial returns no longer justify the risks.

Radev Confronts the Consequences of Moscow’s War

The attacks have also placed Bulgarian Prime Minister Rumen Radev in an increasingly difficult political position.

Radev has advocated renewed diplomatic engagement with Moscow and questioned the emphasis placed on military assistance to Ukraine. He has rejected accusations of being pro-Russian, presenting his approach as a pragmatic alternative to prolonged confrontation.

Yet the attacks have demonstrated the limitations of maintaining political distance from a war whose economic and security consequences are reaching Bulgarian waters.

After summoning Russian Ambassador Eleonora Mitrofanova on 13th October, Radev acknowledged that Bulgaria possessed no conclusive evidence establishing responsibility for the latest strikes. Nevertheless, he argued that their consequences benefited Russia and questioned why Ukraine would attack its own commercial vessels.

According to the Bulgarian News Agency’s account of the meeting, the prime minister also warned that higher insurance costs and shipping companies’ reluctance to serve Bulgarian ports were already damaging the national economy.

This is the fundamental change confronting Sofia. The conflict is no longer solely a question of Bulgaria’s position towards Ukraine or its diplomatic relationship with Russia. It is affecting the country’s commercial interests, energy supplies and responsibilities as a NATO member.

Radev’s response does not necessarily indicate a wholesale reversal of his previous political position. It demonstrates that the practical obligations of government can leave considerably less room for accommodation with Moscow than the arguments advanced from outside direct responsibility for national security.

Food Security Becomes Another Instrument of Pressure

The broader consequences may be felt most severely outside Europe.

Ukraine remains an important supplier of wheat, maize and vegetable oils to international markets, including countries in Africa, Asia and the Middle East. Interruptions to these exports affect more than Ukraine’s agricultural revenues. They can increase transport costs, delay deliveries and reduce the availability of competitively priced food in import-dependent countries.

Speaking at the Warsaw Security Forum on 12th October, President Volodymyr Zelenskyy warned of a possible agricultural crisis, arguing that Russian interference with Black Sea shipping could leave countries in Africa, Asia and the Middle East facing serious supply difficulties within months.

The warning reflects a mechanism already familiar from the earlier stages of Russia’s invasion. Following Moscow’s withdrawal from the UN-brokered grain agreement in July 2023, Ukrainian agricultural exporters faced renewed attacks on port infrastructure and substantial uncertainty over maritime access.

The danger is not necessarily an immediate worldwide shortage of grain. Wheat prices remained relatively steady following the 13th October incidents. Rather, sustained disruption could progressively reduce available export capacity, increase costs and place vulnerable importing countries under greater pressure.

For Moscow, such disruption could serve several purposes simultaneously: weakening Ukraine’s economy, raising the costs of international support for Kyiv and creating additional pressures on governments concerned about food inflation and social stability.

Europe’s Black Sea Security Strategy Faces a Practical Test

The immediate challenge for Brussels and NATO is how to protect commercial navigation without allowing the conflict to expand into a direct military confrontation.

Bulgaria has requested stronger air and maritime surveillance and is seeking closer coordination with Romania and Turkey. Defence Minister Dimitar Stoyanov said on 14th October that Sofia expected to join a NATO counter-drone initiative by the end of the month.

The EU has already developed a framework for addressing precisely such threats. Its Black Sea strategy, announced in May 2025, proposed a maritime security hub integrating surveillance, intelligence-sharing, infrastructure protection and regional cooperation.

The attacks now expose the difference between developing a security framework and providing effective protection to merchant vessels. Better intelligence can identify threats, but preventing further sinkings requires detection systems, coordinated responses and sufficient defensive capabilities.

Turkey’s involvement is particularly important because of its control over the Bosphorus and Dardanelles and its established role in Black Sea maritime security. Any workable regional arrangement must therefore extend beyond cooperation between Bulgaria and Romania.

The incidents occurred outside Bulgaria’s 12-nautical-mile territorial sea, meaning they do not automatically constitute an armed attack on NATO territory under Article 5. Nevertheless, repeated strikes within the economic zones of alliance members pose a substantial challenge to maritime security.

Russia’s campaign against Ukrainian exports is increasingly imposing costs on neighbouring European states and international trading partners. The question facing the EU is whether it can secure the commercial routes on which both Ukraine’s economy and the food supplies of millions beyond Europe depend.

The Black Sea is a strategic region of key importance for food security, the blue economy, maritime transport, tourism, fisheries, and aquaculture. This was stated by the Bulgarian Deputy Minister of Agriculture and Food, Prof. Dr. Ivan Paligorov, at the opening of the Stakeholder Conference on the Common Maritime Agenda for the Black Sea 2026 […]